|
ELS
< Back

CVE-2023-4155

Updated on 13 Sep 2023

Severity

5.6 Medium severity

Details

CVSS score
5.6
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple times, they can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (CONFIG_VMAP_STACK).

Details

Affected product:
AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Debian 10 ELS , Debian 11 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:
kernel @ 5.10.0 (+21 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 8 Released
23 kernels
  • 4.18.0-477.27.2.el8_8
  • 4.18.0-348.12.2.el8_5
  • 4.18.0-348.2.1.el8_5
  • 4.18.0-348.20.1.el8.fscrypt
  • 4.18.0-348.20.1.el8_5
  • 4.18.0-348.23.1.el8_5
  • 4.18.0-348.7.1.el8_5
  • 4.18.0-348.el8
  • 4.18.0-372.13.1.el8_6
  • 4.18.0-372.16.1.el8_6
  • 4.18.0-372.19.1.el8_6
  • 4.18.0-372.26.1.el8_6
  • 4.18.0-372.32.1.el8_6
  • 4.18.0-372.9.1.el8
  • 4.18.0-425.10.1.el8_7
  • 4.18.0-425.13.1.el8_7
  • 4.18.0-425.19.2.el8_7
  • 4.18.0-425.3.1.el8
  • 4.18.0-477.10.1.el8_8
  • 4.18.0-477.13.1.el8_8
  • 4.18.0-477.15.1.el8_8
  • 4.18.0-477.21.1.el8_8
  • 4.18.0-477.27.1.el8_8
AlmaLinux 9 Released
14 kernels
  • 5.14.0-162.12.1.el9_1
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-284.11.1.el9_2
  • 5.14.0-284.18.1.el9_2
  • 5.14.0-284.25.1.el9_2
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-70.13.1.el9_0
  • 5.14.0-70.17.1.el9_0
  • 5.14.0-70.22.1.el9_0
  • 5.14.0-70.26.1.el9_0
  • 5.14.0-70.30.1.el9_0
CentOS 8 Released
3 kernels
  • 4.18.0-348.2.1.el8_5
  • 4.18.0-348.7.1.el8_5
  • 4.18.0-348.el8
CloudLinux OS 7h Released
30 kernels
  • 4.18.0-477.15.1.lve.2.el7h
  • 4.18.0-477.21.1.lve.1.el7h
  • 4.18.0-477.21.1.lve.el7h
  • 4.18.0-477.27.1.lve.el7h
  • 4.18.0-477.27.2.lve.el7h
  • 4.18.0-348.12.2.lve.1.el7h
  • 4.18.0-348.12.2.lve.2.el7h
  • 4.18.0-348.12.2.lve.el7h
  • 4.18.0-348.20.1.lve.1.el7h
  • 4.18.0-348.20.1.lve.el7h
  • 4.18.0-348.23.1.lve.el7h
  • 4.18.0-348.7.1.lve.el7h
  • 4.18.0-348.lve.el7h
  • 4.18.0-372.13.1.lve.el7h
  • 4.18.0-372.16.1.lve.el7h
  • 4.18.0-372.19.1.lve.el7h
  • 4.18.0-372.26.1.lve.1.el7h
  • 4.18.0-372.32.1.lve.el7h
  • 4.18.0-372.9.1.lve.el7h
  • 4.18.0-425.10.1.lve.el7h
  • 4.18.0-425.13.1.lve.el7h
  • 4.18.0-425.19.2.lve.el7h
  • 4.18.0-425.3.1.lve.1.el7h
  • 4.18.0-425.3.1.lve.2.el7h
  • 4.18.0-425.3.1.lve.3.el7h
  • 4.18.0-425.3.1.lve.el7h
  • 4.18.0-477.10.1.lve.1.el7h
  • 4.18.0-477.13.1.lve.1.el7h
  • 4.18.0-477.13.1.lve.el7h
  • 4.18.0-477.15.1.lve.1.el7h
CloudLinux OS 8 Released
28 kernels
  • 4.18.0-348.12.2.lve.el8
  • 4.18.0-348.20.1.lve.1.el8
  • 4.18.0-348.20.1.lve.el8
  • 4.18.0-348.23.1.lve.el8
  • 4.18.0-348.7.1.lve.el8
  • 4.18.0-348.lve.el8
  • 4.18.0-372.13.1.lve.el8
  • 4.18.0-372.16.1.lve.el8
  • 4.18.0-372.19.1.lve.el8
  • 4.18.0-372.26.1.lve.1.el8
  • 4.18.0-372.32.1.lve.el8
  • 4.18.0-372.9.1.1.lve.el8
  • 4.18.0-372.9.1.lve.el8
  • 4.18.0-425.10.1.lve.el8
  • 4.18.0-425.13.1.lve.el8
  • 4.18.0-425.19.2.lve.el8
  • 4.18.0-425.3.1.lve.1.el8
  • 4.18.0-425.3.1.lve.2.el8
  • 4.18.0-425.3.1.lve.3.el8
  • 4.18.0-425.3.1.lve.el8
  • 4.18.0-477.10.1.lve.el8
  • 4.18.0-477.13.1.lve.1.el8
  • 4.18.0-477.13.1.lve.el8
  • 4.18.0-477.15.1.lve.2.el8
  • 4.18.0-477.21.1.lve.1.el8
  • 4.18.0-477.21.1.lve.el8
  • 4.18.0-477.27.1.lve.el8
  • 4.18.0-477.27.2.lve.el8
Debian 12 Released
4 kernels
  • 6.1.27-1
  • 6.1.38-4
  • 6.1.38-1
  • 6.1.38-2
Oracle Linux 8 Released
22 kernels
  • 4.18.0-348.12.2.el8_5
  • 4.18.0-348.2.1.el8_5
  • 4.18.0-348.20.1.el8_5
  • 4.18.0-348.23.1.el8_5
  • 4.18.0-348.7.1.el8_5
  • 4.18.0-348.el8
  • 4.18.0-372.13.1.0.1.el8_6
  • 4.18.0-372.16.1.0.1.el8_6
  • 4.18.0-372.19.1.0.1.el8_6
  • 4.18.0-372.26.1.0.1.el8_6
  • 4.18.0-372.32.1.0.1.el8_6
  • 4.18.0-372.9.1.el8
  • 4.18.0-425.10.1.el8_7
  • 4.18.0-425.13.1.el8_7
  • 4.18.0-425.19.2.el8_7
  • 4.18.0-425.3.1.el8
  • 4.18.0-477.10.1.el8_8
  • 4.18.0-477.13.1.el8_8
  • 4.18.0-477.15.1.el8_8
  • 4.18.0-477.21.1.el8_8
  • 4.18.0-477.27.0.1.el8_8
  • 4.18.0-477.27.1.el8_8
Oracle Linux 9 Released
16 kernels
  • 5.14.0-70.22.1.0.1.el9_0
  • 5.14.0-70.26.1.0.1.el9_0
  • 5.14.0-162.12.1.el9_1
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-284.11.1.el9_2
  • 5.14.0-284.18.1.el9_2
  • 5.14.0-284.25.1.0.1.el9_2
  • 5.14.0-284.25.1.el9_2
  • 5.14.0-284.30.0.1.el9_2
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-70.13.1.0.3.el9_0
  • 5.14.0-70.17.1.0.1.el9_0
  • 5.14.0-70.30.1.0.1.el9_0
Proxmox VE 7 5.15 Will Not Fix
37 kernels
  • 5.15.5-1-pve-5.15.5-1
  • 5.15.12-1-pve-5.15.12-2
  • 5.15.12-1-pve-5.15.12-3
  • 5.15.17-1-pve-5.15.17-1
  • 5.15.19-1-pve-5.15.19-1
  • 5.15.19-2-pve-5.15.19-2
  • 5.15.19-2-pve-5.15.19-3
  • 5.15.27-1-pve-5.15.27-1
  • 5.15.30-1-pve-5.15.30-1
  • 5.15.30-2-pve-5.15.30-3
  • 5.15.35-1-pve-5.15.35-1
  • 5.15.35-1-pve-5.15.35-2
  • 5.15.35-1-pve-5.15.35-3
  • 5.15.35-2-pve-5.15.35-4
  • 5.15.35-2-pve-5.15.35-5
  • 5.15.35-3-pve-5.15.35-6
  • 5.15.39-1-pve-5.15.39-1
  • 5.15.39-2-pve-5.15.39-2
  • 5.15.39-3-pve-5.15.39-3
  • 5.15.39-4-pve-5.15.39-4
  • 5.15.7-1-pve-5.15.7-1
  • 5.15.53-1-pve-5.15.53-1
  • 5.15.60-1-pve-5.15.60-1
  • 5.15.60-2-pve-5.15.60-2
  • 5.15.64-1-pve-5.15.64-1
  • 5.15.74-1-pve-5.15.74-1
  • 5.15.83-1-pve-5.15.83-1
  • 5.15.102-1-pve-5.15.102-1
  • 5.15.104-1-pve-5.15.104-1
  • 5.15.104-1-pve-5.15.104-2
  • 5.15.107-1-pve-5.15.107-1
  • 5.15.107-2-pve-5.15.107-2
  • 5.15.85-1-pve-5.15.85-1
  • 5.15.108-1-pve-5.15.108-1
  • 5.15.108-1-pve-5.15.108-2
  • 5.15.116-1-pve-5.15.116-1
  • 5.15.111-1-pve-5.15.111-1
RHEL 8 Released
21 kernels
  • 4.18.0-348.12.2.el8_5
  • 4.18.0-348.2.1.el8_5
  • 4.18.0-348.20.1.el8_5
  • 4.18.0-348.23.1.el8_5
  • 4.18.0-348.7.1.el8_5
  • 4.18.0-348.el8
  • 4.18.0-372.13.1.el8_6
  • 4.18.0-372.16.1.el8_6
  • 4.18.0-372.19.1.el8_6
  • 4.18.0-372.26.1.el8_6
  • 4.18.0-372.32.1.el8_6
  • 4.18.0-372.9.1.el8
  • 4.18.0-425.10.1.el8_7
  • 4.18.0-425.13.1.el8_7
  • 4.18.0-425.19.2.el8_7
  • 4.18.0-425.3.1.el8
  • 4.18.0-477.10.1.el8_8
  • 4.18.0-477.13.1.el8_8
  • 4.18.0-477.15.1.el8_8
  • 4.18.0-477.21.1.el8_8
  • 4.18.0-477.27.1.el8_8
RHEL8 EUS 8.6 Released
18 kernels
  • 4.18.0-372.36.1.el8_6
  • 4.18.0-372.70.1.el8_6
  • 4.18.0-372.57.1.el8_6
  • 4.18.0-372.51.1.el8_6
  • 4.18.0-372.41.1.el8_6
  • 4.18.0-372.80.1.el8_6
  • 4.18.0-372.75.1.el8_6
  • 4.18.0-372.64.1.el8_6
  • 4.18.0-372.46.1.el8_6
  • 4.18.0-372.87.1.el8_6
  • 4.18.0-372.91.1.el8_6
  • 4.18.0-372.93.1.el8_6
  • 4.18.0-372.95.1.el8_6
  • 4.18.0-372.98.1.el8_6
  • 4.18.0-372.100.1.el8_6
  • 4.18.0-372.102.1.el8_6
  • 4.18.0-372.105.1.el8_6
  • 4.18.0-372.52.1.el8_6
RHEL 9 Released
15 kernels
  • 5.14.0-162.12.1.el9_1
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-284.11.1.el9_2
  • 5.14.0-284.18.1.el9_2
  • 5.14.0-284.25.1.el9_2
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-70.13.1.el9_0
  • 5.14.0-70.17.1.el9_0
  • 5.14.0-70.22.1.el9_0
  • 5.14.0-70.26.1.el9_0
  • 5.14.0-70.30.1.el9_0
  • 5.14.0-70.5.1.el9_0
Rocky Linux 8 Released
21 kernels
  • 4.18.0-348.12.2.el8_5
  • 4.18.0-348.2.1.el8_5
  • 4.18.0-348.20.1.el8_5
  • 4.18.0-348.23.1.el8_5
  • 4.18.0-348.7.1.el8_5
  • 4.18.0-372.13.1.el8_6
  • 4.18.0-372.16.1.el8_6.0.1
  • 4.18.0-372.16.1.el8_6
  • 4.18.0-372.19.1.el8_6
  • 4.18.0-372.26.1.el8_6
  • 4.18.0-372.32.1.el8_6
  • 4.18.0-372.9.1.el8
  • 4.18.0-425.10.1.el8_7
  • 4.18.0-425.13.1.el8_7
  • 4.18.0-425.19.2.el8_7
  • 4.18.0-425.3.1.el8
  • 4.18.0-477.10.1.el8_8
  • 4.18.0-477.13.1.el8_8
  • 4.18.0-477.15.1.el8_8
  • 4.18.0-477.21.1.el8_8
  • 4.18.0-477.27.1.el8_8
Rocky Linux 9 Released
12 kernels
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-162.6.1.el9_1.0.1
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-70.22.1.el9_0
  • 5.14.0-70.26.1.el9_0
  • 5.14.0-70.30.1.el9_0
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-162.12.1.el9_1.0.1
  • 5.14.0-162.12.1.el9_1.0.2
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-284.11.1.el9_2
Ubuntu 20.04 HWE AWS Will Not Fix
26 kernels
  • 5.15.0-1014.18~20.04.1
  • 5.15.0-1015.19~20.04.1
  • 5.15.0-1017.21~20.04.1
  • 5.15.0-1018.22~20.04.1
  • 5.15.0-1020.24~20.04.1
  • 5.15.0-1021.25~20.04.1
  • 5.15.0-1022.26~20.04.1
  • 5.15.0-1023.27~20.04.1
  • 5.15.0-1026.30~20.04.2
  • 5.15.0-1027.31~20.04.1
  • 5.15.0-1028.32~20.04.1
  • 5.15.0-1030.34~20.04.1
  • 5.15.0-1031.35~20.04.1
  • 5.15.0-1033.37~20.04.1
  • 5.15.0-1034.38~20.04.1
  • 5.15.0-1035.39~20.04.1
  • 5.15.0-1036.40~20.04.1
  • 5.15.0-1037.41~20.04.1
  • 5.15.0-1038.43~20.04.1
  • 5.15.0-1039.44~20.04.1
  • 5.15.0-1040.45~20.04.1
  • 5.15.0-1041.46~20.04.1
  • 5.15.0-1043.48~20.04.1
  • 5.15.0-1044.49~20.04.1
  • 5.15.0-1019.23~20.04.1
  • 5.15.0-1045.50~20.04.1
Ubuntu 20.04 HWE Azure Will Not Fix
12 kernels
  • 5.15.0-1008.9~20.04.1
  • 5.15.0-1013.16~20.04.1
  • 5.15.0-1014.17~20.04.1
  • 5.15.0-1017.20~20.04.1
  • 5.15.0-1019.24~20.04.1
  • 5.15.0-1020.25~20.04.1
  • 5.15.0-1021.26~20.04.1
  • 5.15.0-1022.27~20.04.1
  • 5.15.0-1023.29~20.04.1
  • 5.15.0-1024.30~20.04.1
  • 5.15.0-1029.36~20.04.1
  • 5.15.0-1034.41~20.04.1
Ubuntu 22.04 Will Not Fix
38 kernels
  • 5.15.0-25.25
  • 5.15.0-27.28
  • 5.15.0-28.29
  • 5.15.0-29.30
  • 5.15.0-30.31
  • 5.15.0-33.34
  • 5.15.0-35.36
  • 5.15.0-37.39
  • 5.15.0-39.42
  • 5.15.0-40.43
  • 5.15.0-41.44
  • 5.15.0-43.46
  • 5.15.0-46.49
  • 5.15.0-47.51
  • 5.15.0-48.54
  • 5.15.0-50.56
  • 5.15.0-52.58
  • 5.15.0-53.59
  • 5.15.0-54.60
  • 5.15.0-56.62
  • 5.15.0-57.63
  • 5.15.0-58.64
  • 5.15.0-60.66
  • 5.15.0-67.74
  • 5.15.0-68.75
  • 5.15.0-69.76
  • 5.15.0-70.77
  • 5.15.0-71.78
  • 5.15.0-72.79
  • 5.15.0-73.80
  • 5.15.0-74.81
  • 5.15.0-75.82
  • 5.15.0-76.83
  • 5.15.0-78.85
  • 5.15.0-79.86
  • 5.15.0-82.91
  • 5.15.0-83.92
  • 5.15.0-84.93
Ubuntu 22.04 AWS Will Not Fix
33 kernels
  • 5.15.0-1004.6
  • 5.15.0-1005.7
  • 5.15.0-1008.10
  • 5.15.0-1009.11
  • 5.15.0-1011.14
  • 5.15.0-1013.17
  • 5.15.0-1014.18
  • 5.15.0-1015.19
  • 5.15.0-1017.21
  • 5.15.0-1018.22
  • 5.15.0-1020.24
  • 5.15.0-1021.25
  • 5.15.0-1022.26
  • 5.15.0-1023.27
  • 5.15.0-1024.29
  • 5.15.0-1026.30
  • 5.15.0-1027.31
  • 5.15.0-1028.32
  • 5.15.0-1030.34
  • 5.15.0-1031.35
  • 5.15.0-1032.36
  • 5.15.0-1033.37
  • 5.15.0-1034.38
  • 5.15.0-1035.39
  • 5.15.0-1036.40
  • 5.15.0-1037.41
  • 5.15.0-1038.43
  • 5.15.0-1039.44
  • 5.15.0-1040.45
  • 5.15.0-1042.47
  • 5.15.0-1043.48
  • 5.15.0-1044.49
  • 5.15.0-1045.50
Ubuntu 22.04 Azure Will Not Fix
29 kernels
  • 5.15.0-1003.4
  • 5.15.0-1005.6
  • 5.15.0-1007.8
  • 5.15.0-1008.9
  • 5.15.0-1010.12
  • 5.15.0-1012.15
  • 5.15.0-1013.16
  • 5.15.0-1014.17
  • 5.15.0-1017.20
  • 5.15.0-1019.24
  • 5.15.0-1020.25
  • 5.15.0-1021.26
  • 5.15.0-1022.27
  • 5.15.0-1023.29
  • 5.15.0-1024.30
  • 5.15.0-1029.36
  • 5.15.0-1034.41
  • 5.15.0-1035.42
  • 5.15.0-1036.43
  • 5.15.0-1037.44
  • 5.15.0-1038.45
  • 5.15.0-1039.46
  • 5.15.0-1040.47
  • 5.15.0-1041.48
  • 5.15.0-1042.49
  • 5.15.0-1044.51
  • 5.15.0-1045.52
  • 5.15.0-1046.53
  • 5.15.0-1047.54